OWASP

6 guides tagged “OWASP”.

  1. InfoSec for Vibecoders: Every Security Concept Your AI-Generated Code Gets Wrong Your AI coding assistant ships SQL injection, exposed secrets, and broken access control by default. Learn every infosec concept you need to catch these before they hit production. 40+ linked guides. Information Security beginner 14 min
  2. What Is the OWASP Non-Human Identity Top 10? The OWASP Non-Human Identity Top 10 catalogs the biggest risks in machine credentials — from stale keys to over-privileged agents. Learn the list. Information Security intermediate 7 min
  3. What Is XXE (XML External Entity Injection)? XML parsers can be told to fetch external resources. XXE abuses that to read local files, probe internal networks, and in some configurations cause denial of service. Information Security intermediate 6 min
  4. What Is the OWASP Top 10? The OWASP Top 10 is the standard list of the most critical web application security risks. Learn all ten categories and how to use the list. Information Security beginner 8 min
  5. How to Test Your App for Broken Access Control A practical guide to testing for IDOR and privilege escalation: two accounts, cross-account ID swaps, and role checks. No security background required. Information Security beginner 8 min
  6. What Is Server-Side Template Injection (SSTI)? Template injection happens when user input is rendered as template code rather than as data, letting an attacker run expressions and often reach remote code execution. Information Security advanced 6 min